Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/u18aKURezlyDV_aipdd5BNmrp3w.roa
File: u18aKURezlyDV_aipdd5BNmrp3w.roa (raw, json)
Hash identifier: tMww2iwMqdI8VkL5BI9cTvoREBhZIfKW1BPx0INArCs=
Subject key identifier: BB:5F:1A:29:44:5E:CE:5C:83:57:F6:A2:A5:D7:79:04:D9:AB:A7:7C
Certificate issuer: /CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150
Certificate serial: 01856BA56D6A7FD418752F0611C51005A32E
Authority key identifier: 0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/u18aKURezlyDV_aipdd5BNmrp3w.roa
Signing time: Sun 01 Jan 2023 04:44:41 +0000
ROA not before: Sun 01 Jan 2023 04:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201278
IP address blocks: 188.66.28.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:a5:6d:6a:7f:d4:18:75:2f:06:11:c5:10:05:a3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150
Validity
Not Before: Jan 1 04:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb5f1a29445ece5c8357f6a2a5d77904d9aba77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:da:7c:d3:81:9a:5e:ee:e0:12:a2:1e:d0:a1:
b8:5c:6e:89:26:bd:1b:3c:7e:9e:c8:dc:eb:3a:7a:
6c:63:54:73:3e:96:b8:79:cd:63:34:11:3b:7c:9e:
b6:61:4b:51:5b:f2:e0:a6:02:fb:b3:ee:fd:2f:1a:
e5:da:fe:ff:b6:dd:1e:01:00:9a:af:f8:0e:0b:f5:
05:c7:89:bd:64:ff:b7:2d:fd:61:3d:0a:e5:b7:a4:
72:3e:c1:52:53:fa:85:be:45:a2:44:80:f6:93:bb:
60:3c:15:87:af:90:78:88:ec:c9:b9:af:83:7d:ab:
55:64:27:d4:94:b4:a4:ce:e8:7c:02:53:6c:5b:44:
58:fa:53:73:af:78:bc:d4:e8:5d:fc:d1:45:ae:78:
d9:d4:9c:cd:ec:d3:4f:60:37:c6:12:84:e4:7b:a6:
aa:a0:52:a0:89:d1:7a:2b:29:eb:b5:65:23:4a:80:
28:31:87:76:51:2a:d3:38:8a:31:99:97:7c:4b:c7:
19:b2:43:a2:6a:f1:14:80:a2:ae:46:d7:43:c0:0c:
2c:b7:7a:66:ae:03:18:40:9d:98:f6:6e:56:80:a9:
da:6b:e2:e6:9c:97:72:d4:36:9c:41:cc:5d:71:84:
9b:9a:c4:3d:c2:5b:27:43:8e:80:cb:be:45:f8:cc:
0c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5F:1A:29:44:5E:CE:5C:83:57:F6:A2:A5:D7:79:04:D9:AB:A7:7C
X509v3 Authority Key Identifier:
keyid:0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/u18aKURezlyDV_aipdd5BNmrp3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.66.28.0/22
Signature Algorithm: sha256WithRSAEncryption
10:8e:0e:ac:dc:d6:46:d3:c1:50:45:fa:c9:3a:d6:24:43:47:
8b:61:cb:0a:60:e2:3d:c2:6e:38:7c:aa:c6:d5:d7:20:cc:3c:
73:9f:33:1a:e2:d3:2e:d6:d3:c3:8a:f1:61:8c:76:31:25:dc:
29:5c:29:83:a9:5b:bc:75:c9:c9:9b:fe:03:f8:70:02:9a:a1:
f5:b9:14:39:58:94:a4:21:38:0d:ad:24:ce:31:c5:b2:ac:18:
f0:d6:ee:7b:a2:1a:62:20:e5:68:ec:c4:9c:f8:d4:58:ba:d2:
09:32:46:7d:9a:87:26:1f:2a:ec:6d:16:e4:63:4c:0b:3c:a5:
f7:a4:4a:00:3c:df:ef:96:af:b3:cc:21:37:53:2e:43:8c:af:
33:4a:d9:6d:66:46:9d:6e:ef:80:34:b9:f8:66:16:0f:2f:5a:
c2:2a:73:ce:26:d9:b4:be:82:c8:22:36:c3:22:6f:0e:69:ab:
69:96:84:3c:40:28:a5:36:f4:cf:8a:f2:52:23:f6:4d:22:94:
3c:40:74:e6:40:67:c3:5c:52:b4:a3:e1:3b:1f:2a:87:fc:0f:
35:e9:4e:5a:ec:a9:1b:0f:8b:04:5c:77:82:2e:a2:4c:55:79:
79:b8:86:12:7f:6e:a3:e9:b3:a5:a2:c6:93:12:eb:25:60:f8:
49:89:78:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:53 2024 by rpki-client on console-ams.rpki-client.org